Conducting an Information Security Gap Analysis

Conducting an Information Security Gap Analysisby Rochelle ShawCopyright 2012, Faulkner Information Services. All Rights Reserved. Docid: 00018422 Publication Date: 1207 Report Type: IMPLEMENTATIONP reviewAn Information Security gap Analysis is a critical step in the Business Continuity Planning process and is a form of risk assessment . A gap Analysis is designed to determine the differences between the present state of Information Security within an enterprise and its ideal, or optimum, state. Existing standards, including those developed by the International Organization for Standardization (ISO), the Information Systems Audit and Control Association (ISACA), and the National Institute of Standards and Technology (NIST), represent guidelines for the process of gap Analysis , but should be used as a part of comprehensive business Security plan. This report defines an Information Security Gap Analysis , looks at possible pitfalls, and provides a step-by-step implementation Contents: Executive Summary Description Possible Pitfalls Step-by-Step Implementation Web Links Executive Summary[return to top of this report]An Information Security gap Analysis is a necessary part of a business' risk management and business continuity programs.

Risk Assessment and Analysis - Determines what the potential risks are, how each will affect business, and how to deal with them. This includes an information security gap analysis. Disaster Recovery Processes - Includes recovery processes for each critical business function. Development of the BCP.

Loading..

Tags:

  Assessment, Information, Security, Analysis, Information security gap analysis

Information